topic Re: problem in network when configured Cisco FTD high-availability in Network Security

problem in network when configured Cisco FTD high-availability

Hacen.bani — Thu, 02 May 2019 07:21:48 GMT

hi team,

i have two ftd 2110on HA with two etherchannel ports to cisco core switch

in the switch i have an error message mac flapping, when i track the mac address !! is the mac of the ftd flapping between the two etherchannel.

i configured the ha active/standby but i show the two firewall active and one of them is disabled in FMC dashboard

please help in this issue

thanks in advance

Re: problem in network when configured Cisco FTD high-availability

Dennis Mink — Thu, 02 May 2019 13:39:55 GMT

so you have port channel A going to your FTD active and port channel B going to FTD passive and the mac address that lives on the inside interface of the FTD flaps between port channel A and B, in otherwords flaps between the two FTDs?

Re: problem in network when configured Cisco FTD high-availability

Hacen.bani — Thu, 02 May 2019 13:42:57 GMT

thanks for reply

Yes,

after same times the two firewall gonna be active/active and the network goes down

in the FMC, i see one of the FTD disabled state

Re: problem in network when configured Cisco FTD high-availability

Hacen.bani — Wed, 08 May 2019 13:44:42 GMT

hi friend

any help with this issue, please !!!?

the two firewalls FTD 2110 after some time with HA config go to Active/active mode

the problem is dual active triggered

I upgraded the two firewalls to the recommended version but always the same problem.

thanks in advance